@highstate/k8s 0.14.2 → 0.16.0

package/src/units/cluster-patch/index.ts

@@ -1,33 +1,23 @@
-import { l3EndpointToString, l4EndpointToString, updateEndpoints } from "@highstate/common"
+import { l3EndpointToString, l4EndpointToString, parseEndpoints } from "@highstate/common"
 import { k8s } from "@highstate/library"
-import { forUnit } from "@highstate/pulumi"
+import { forUnit, toPromise } from "@highstate/pulumi"
 
 const { args, inputs, outputs } = forUnit(k8s.clusterPatch)
 
-const endpoints = await updateEndpoints(
-  inputs.k8sCluster.endpoints,
-  args.endpoints,
-  inputs.endpoints,
-  args.endpointsPatchMode,
-)
+const cluster = await toPromise(inputs.k8sCluster)
+const endpoints = await parseEndpoints(args.endpoints, inputs.endpoints, 3)
+const apiEndpoints = await parseEndpoints(args.apiEndpoints, inputs.apiEndpoints, 4)
 
-const apiEndpoints = await updateEndpoints(
-  inputs.k8sCluster.apiEndpoints,
-  args.apiEndpoints,
-  inputs.apiEndpoints,
-  args.apiEndpointsPatchMode,
-)
+const newEndpoints = endpoints.length > 0 ? endpoints : cluster.endpoints
+const newApiEndpoints = apiEndpoints.length > 0 ? apiEndpoints : cluster.apiEndpoints
 
 export default outputs({
   k8sCluster: inputs.k8sCluster.apply(k8sCluster => ({
     ...k8sCluster,
-    endpoints,
-    apiEndpoints,
+    endpoints: newEndpoints,
+    apiEndpoints: newApiEndpoints,
   })),
 
-  endpoints,
-  apiEndpoints,
-
   $statusFields: {
     endpoints: endpoints.map(l3EndpointToString),
     apiEndpoints: apiEndpoints.map(l4EndpointToString),

package/src/units/dns01-issuer/index.ts

@@ -28,7 +28,7 @@ new cert_manager.v1.ClusterIssuer(
             dns01: dns01SolverMediator.callOutput(inputs.dnsProvider.implRef, {
               namespace: certManagerNs,
             }),
-            selector: { dnsZones: [inputs.dnsProvider.domain] },
+            selector: { dnsZones: inputs.dnsProvider.zones },
           },
         ],
         privateKeySecretRef: {
@@ -41,12 +41,8 @@ new cert_manager.v1.ClusterIssuer(
 )
 
 export default outputs({
-  $statusFields: {
-    domain: inputs.dnsProvider.domain,
-  },
-
   tlsIssuer: {
-    domain: inputs.dnsProvider.domain,
+    zones: inputs.dnsProvider.zones,
     implRef: {
       package: "@highstate/k8s",
       data: {
@@ -55,4 +51,8 @@ export default outputs({
       },
     },
   },
+
+  $statusFields: {
+    zones: inputs.dnsProvider.zones,
+  },
 })

package/src/units/existing-cluster/index.ts

@@ -1,8 +1,11 @@
 import {
   l3EndpointToString,
   l4EndpointToString,
-  parseL3Endpoint,
-  parseL4Endpoint,
+  mergeAddresses,
+  mergeEndpoints,
+  parseAddress,
+  parseEndpoint,
+  parseEndpoints,
 } from "@highstate/common"
 import { type ImplementationReference, k8s } from "@highstate/library"
 import { forUnit, secret, toPromise } from "@highstate/pulumi"
@@ -10,7 +13,7 @@ import { AppsV1Api, KubeConfig } from "@kubernetes/client-node"
 import { core, Provider } from "@pulumi/kubernetes"
 import { createK8sTerminal, detectExternalIps } from "../../cluster"
 
-const { name, args, secrets, outputs } = forUnit(k8s.existingCluster)
+const { name, args, inputs, secrets, outputs } = forUnit(k8s.existingCluster)
 
 const kubeconfigContent = await toPromise(secrets.kubeconfig.apply(JSON.stringify))
 
@@ -35,11 +38,29 @@ if (hasCilium) {
   }
 }
 
-const externalIps =
-  args.externalIps ?? (await detectExternalIps(kubeConfig, args.internalIpsPolicy))
+// calculate external IPs
+let externalIps = args.externalIps.map(parseAddress)
 
-const endpoints = externalIps.map(parseL3Endpoint)
-const apiEndpoints = [parseL4Endpoint(kubeConfig.clusters[0].server.replace("https://", ""))]
+if (args.autoDetectExternalIps) {
+  const detectedIps = await detectExternalIps(kubeConfig, args.internalIpsPolicy)
+  externalIps = mergeAddresses([...externalIps, ...detectedIps])
+}
+
+// calculate endpoints
+let endpoints = await parseEndpoints(args.endpoints, inputs.endpoints)
+
+if (args.useExternalIpsAsEndpoints) {
+  const ipEndpoints = externalIps.map(ip => parseEndpoint(ip))
+  endpoints = mergeEndpoints([...endpoints, ...ipEndpoints])
+}
+
+// calculate api endpoints
+let apiEndpoints = await parseEndpoints(args.apiEndpoints, inputs.endpoints, 4)
+
+if (args.useKubeconfigApiEndpoint) {
+  const configEndpoint = parseEndpoint(kubeConfig.clusters[0].server.replace("https://", ""), 4)
+  apiEndpoints = mergeEndpoints([configEndpoint, ...apiEndpoints])
+}
 
 const kubeSystem = core.v1.Namespace.get("kube-system", "kube-system", { provider })
 
@@ -56,9 +77,6 @@ export default outputs({
     kubeconfig: secret(kubeconfigContent),
   },
 
-  endpoints,
-  apiEndpoints,
-
   $terminals: [createK8sTerminal(kubeconfigContent)],
 
   $statusFields: {

package/src/units/gateway-api/index.ts

@@ -10,7 +10,7 @@ const provider = await getProviderAsync(inputs.k8sCluster)
 new yaml.v2.ConfigFile(
   "gateway-api",
   {
-    file: "https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.3.0/experimental-install.yaml",
+    file: "https://github.com/kubernetes-sigs/gateway-api/releases/download/v1.4.0/experimental-install.yaml",
   },
   { provider },
 )

package/src/units/reduced-access-cluster/index.ts

@@ -3,39 +3,31 @@ import { k8s } from "@highstate/library"
 import { fileFromString, forUnit, interpolate, output, secret, toPromise } from "@highstate/pulumi"
 import { join } from "remeda"
 import { createK8sTerminal } from "../../cluster"
-import { ConfigMap } from "../../config-map"
-import { Deployment } from "../../deployment"
 import { Namespace } from "../../namespace"
-import { PersistentVolumeClaim } from "../../pvc"
 import { ClusterAccessScope } from "../../rbac"
-import { Secret } from "../../secret"
-import { Service } from "../../service"
-import { StatefulSet } from "../../stateful-set"
 
-const { name, args, inputs, outputs } = forUnit(k8s.reducedAccessCluster)
+const { args, inputs, outputs } = forUnit(k8s.reducedAccessCluster)
 
 const resolvedInputs = await toPromise(inputs)
 
-const resources = [
-  ...resolvedInputs.deployments.map(r => Deployment.for(r, inputs.k8sCluster)),
-  ...resolvedInputs.statefulSets.map(r => StatefulSet.for(r, inputs.k8sCluster)),
-  ...resolvedInputs.services.map(r => Service.for(r, inputs.k8sCluster)),
-  ...resolvedInputs.persistentVolumeClaims.map(r =>
-    PersistentVolumeClaim.for(r, inputs.k8sCluster),
-  ),
-  ...resolvedInputs.secrets.map(r => Secret.for(r, inputs.k8sCluster)),
-  ...resolvedInputs.configMaps.map(r => ConfigMap.for(r, inputs.k8sCluster)),
-]
-
-const accessScope = await ClusterAccessScope.forResources(args.serviceAccountName ?? name, {
-  namespace: Namespace.for(resolvedInputs.namespace, inputs.k8sCluster),
-  verbs: args.verbs,
-  resources,
-})
+const accessScope = new ClusterAccessScope(
+  "scope",
+  {
+    namespace: Namespace.for(resolvedInputs.namespace, inputs.k8sCluster),
+    extraNamespaces: resolvedInputs.extraNamespaces.map(ns => Namespace.for(ns, inputs.k8sCluster)),
+    rules: args.rules,
+    resources: resolvedInputs.resources,
+  },
+  {},
+)
 
 const resourceLines = await toPromise(
   output(
-    resources.map(r => interpolate`- ${r.kind} "${r.metadata.namespace}/${r.metadata.name}"`),
+    resolvedInputs.resources.map(r =>
+      r.isNamespaced
+        ? interpolate`- ${r.kind} "${r.metadata.namespace}/${r.metadata.name}"`
+        : interpolate`- ${r.kind} "${r.metadata.name}"`,
+    ),
   ).apply(join("\n")),
 )
 

package/src/worker.ts

@@ -4,17 +4,19 @@ import type { DeepInput, Input, InputArray, Unwrap } from "@highstate/pulumi"
 import type { Namespace } from "./namespace"
 import { type Output, output } from "@pulumi/pulumi"
 import { ClusterAccessScope } from "./rbac"
-import { images, type ScopedResource } from "./shared"
+import { images, type NamespacedResource } from "./shared"
 
 export async function createMonitorWorker(
   namespace: Input<Namespace>,
-  resources: InputArray<ScopedResource>,
+  resources: InputArray<NamespacedResource>,
 ): Promise<Output<Unwrap<UnitWorker>>> {
-  const scope = await ClusterAccessScope.forResources("monitor", {
+  const scope = new ClusterAccessScope("monitor", {
+    rule: {
+      verbs: ["get", "list", "watch"],
+    },
+
     namespace,
     resources,
-    verbs: ["get", "list", "watch"],
-    collectionAccess: true,
   })
 
   return output({

package/src/workload.ts

@@ -1,9 +1,10 @@
-import type { k8s } from "@highstate/library"
+import type { k8s, network } from "@highstate/library"
 import type { types } from "@pulumi/kubernetes"
 import type { Except } from "type-fest"
 import type { DeploymentArgs } from "./deployment"
+import type { JobArgs } from "./job"
 import type { StatefulSetArgs } from "./stateful-set"
-import { AccessPointRoute, type AccessPointRouteArgs } from "@highstate/common"
+import { AccessPointRoute, type AccessPointRouteArgs, mergeEndpoints } from "@highstate/common"
 import { type TerminalSpec, trimIndentation, type UnitTerminal } from "@highstate/contract"
 import {
   type ComponentResourceOptions,
@@ -25,7 +26,7 @@ import {
 } from "@pulumi/pulumi"
 import { sha256 } from "crypto-hash"
 import { deepmerge } from "deepmerge-ts"
-import { filter, isNonNullish, unique, uniqueBy } from "remeda"
+import { filter, flat, isNonNullish, unique, uniqueBy } from "remeda"
 import {
   type Container,
   getFallbackContainerName,
@@ -38,7 +39,7 @@ import { Namespace } from "./namespace"
 import { NetworkPolicy, type NetworkPolicyArgs } from "./network-policy"
 import { podSpecDefaults } from "./pod"
 import { mapContainerPortToServicePort, Service, type ServiceArgs } from "./service"
-import { commonExtraArgs, images, ScopedResource, type ScopedResourceArgs } from "./shared"
+import { commonExtraArgs, images, NamespacedResource, type ScopedResourceArgs } from "./shared"
 
 export type WorkloadTerminalArgs = {
   /**
@@ -114,15 +115,58 @@ export const exposableWorkloadExtraArgs = [
   "routes",
 ] as const
 
+export type WorkloadType = "Deployment" | "StatefulSet" | "Job" | "CronJob"
 export type ExposableWorkloadType = "Deployment" | "StatefulSet"
 
+export type GenericWorkloadArgs = Omit<ExposableWorkloadArgs, "existing"> & {
+  /**
+   * The type of workload to create.
+   *
+   * Will be ignored if the `existing` argument is provided.
+   */
+  defaultType: WorkloadType
+
+  /**
+   * The existing workload to patch.
+   */
+  existing: Input<k8s.Workload | undefined>
+
+  /**
+   * The args specific to the "Deployment" workload type.
+   *
+   * Will be ignored for other workload types.
+   */
+  deployment?: Input<DeploymentArgs>
+
+  /**
+   * The args specific to the "StatefulSet" workload type.
+   *
+   * Will be ignored for other workload types.
+   */
+  statefulSet?: Input<StatefulSetArgs>
+
+  /**
+   * The args specific to the "Job" workload type.
+   *
+   * Will be ignored for other workload types.
+   */
+  job?: Input<JobArgs>
+
+  /**
+   * The args specific to the "CronJob" workload type.
+   *
+   * Will be ignored for other workload types.
+   */
+  cronJob?: Input<JobArgs>
+}
+
 export type GenericExposableWorkloadArgs = Omit<ExposableWorkloadArgs, "existing"> & {
   /**
    * The type of workload to create.
    *
    * Will be ignored if the `existing` argument is provided.
    */
-  type: ExposableWorkloadType
+  defaultType: ExposableWorkloadType
 
   /**
    * The existing workload to patch.
@@ -341,19 +385,18 @@ export function getExposableWorkloadComponents(
   return { labels, containers, volumes, podSpec, podTemplate, networkPolicy, service, routes }
 }
 
-export abstract class Workload extends ScopedResource {
+export abstract class Workload extends NamespacedResource {
   protected constructor(
     type: string,
     protected readonly name: string,
     args: Inputs,
     opts: ComponentResourceOptions | undefined,
 
-    apiVersion: Output<string>,
-    kind: Output<string>,
+    metadata: Output<types.output.meta.v1.ObjectMeta>,
+    namespace: Output<Namespace>,
+
     protected readonly terminalArgs: Output<Unwrap<WorkloadTerminalArgs>>,
     protected readonly containers: Output<Container[]>,
-    namespace: Output<Namespace>,
-    metadata: Output<types.output.meta.v1.ObjectMeta>,
 
     /**
      * The rendered pod template of the workload.
@@ -367,7 +410,7 @@ export abstract class Workload extends ScopedResource {
      */
     readonly networkPolicy: Output<NetworkPolicy | undefined>,
   ) {
-    super(type, name, args, opts, apiVersion, kind, namespace, metadata)
+    super(type, name, args, opts, metadata, namespace)
   }
 
   protected abstract get templateMetadata(): Output<types.output.meta.v1.ObjectMeta>
@@ -378,7 +421,7 @@ export abstract class Workload extends ScopedResource {
   private set terminal(_value: never) {}
 
   /**
-   * The instance terminal to interact with the deployment.
+   * The instance terminal to interact with the workload's pods.
    */
   get terminal(): Output<UnitTerminal> {
     const containerName = this.podTemplate.spec.containers.apply(containers => containers[0].name)
@@ -411,7 +454,7 @@ export abstract class Workload extends ScopedResource {
               set -euo pipefail
 
               NAMESPACE="${this.metadata.namespace}"
-              RESOURCE_TYPE="${this.kind.apply(k => k.toLowerCase())}"
+              RESOURCE_TYPE="${this.kind.toLowerCase()}"
               RESOURCE_NAME="${this.metadata.name}"
               CONTAINER_NAME="${containerName}"
               SHELL="${shell}"
@@ -496,7 +539,7 @@ export abstract class Workload extends ScopedResource {
           "-it",
           "-n",
           this.metadata.namespace,
-          interpolate`${this.kind.apply(k => k.toLowerCase())}/${this.metadata.name}`,
+          `${this.kind.toLowerCase()}/${this.metadata.name}`,
           "-c",
           containerName,
           "--",
@@ -515,6 +558,99 @@ export abstract class Workload extends ScopedResource {
       },
     })
   }
+
+  /**
+   * Creates a generic workload or patches the existing one.
+   */
+  static createOrPatchGeneric(
+    name: string,
+    args: GenericWorkloadArgs,
+    opts?: CustomResourceOptions,
+  ): Output<Workload> {
+    return output(args).apply(async args => {
+      if (args.existing?.kind === "Deployment") {
+        const { Deployment } = await import("./deployment")
+
+        return Deployment.patch(
+          name,
+          {
+            ...deepmerge(args, args.deployment),
+            name: args.existing.metadata.name,
+            namespace: Namespace.forResourceAsync(args.existing, output(args.namespace).cluster),
+          },
+          opts,
+        )
+      }
+
+      if (args.existing?.kind === "StatefulSet") {
+        const { StatefulSet } = await import("./stateful-set")
+
+        return StatefulSet.patch(
+          name,
+          {
+            ...deepmerge(args, args.statefulSet),
+            name: args.existing.metadata.name,
+            namespace: Namespace.forResourceAsync(args.existing, output(args.namespace).cluster),
+          },
+          opts,
+        )
+      }
+
+      if (args.existing?.kind === "Job") {
+        const { Job } = await import("./job")
+
+        return Job.patch(
+          name,
+          {
+            ...deepmerge(args, args.job),
+            name: args.existing.metadata.name,
+            namespace: Namespace.forResourceAsync(args.existing, output(args.namespace).cluster),
+          },
+          opts,
+        )
+      }
+
+      if (args.existing?.kind === "CronJob") {
+        const { CronJob } = await import("./cron-job")
+
+        return CronJob.patch(
+          name,
+          {
+            ...deepmerge(args, args.cronJob),
+            name: args.existing.metadata.name,
+            namespace: Namespace.forResourceAsync(args.existing, output(args.namespace).cluster),
+          },
+          opts,
+        )
+      }
+
+      if (args.defaultType === "Deployment") {
+        const { Deployment } = await import("./deployment")
+
+        return Deployment.create(name, deepmerge(args, args.deployment), opts)
+      }
+
+      if (args.defaultType === "StatefulSet") {
+        const { StatefulSet } = await import("./stateful-set")
+
+        return StatefulSet.create(name, deepmerge(args, args.statefulSet), opts)
+      }
+
+      if (args.defaultType === "Job") {
+        const { Job } = await import("./job")
+
+        return Job.create(name, deepmerge(args, args.job), opts)
+      }
+
+      if (args.defaultType === "CronJob") {
+        const { CronJob } = await import("./cron-job")
+
+        return CronJob.create(name, deepmerge(args, args.cronJob), opts)
+      }
+
+      throw new Error(`Unknown workload type: ${args.defaultType as string}`)
+    })
+  }
 }
 
 export abstract class ExposableWorkload extends Workload {
@@ -524,12 +660,11 @@ export abstract class ExposableWorkload extends Workload {
     args: Inputs,
     opts: ComponentResourceOptions | undefined,
 
-    apiVersion: Output<string>,
-    kind: Output<string>,
+    metadata: Output<types.output.meta.v1.ObjectMeta>,
+    namespace: Output<Namespace>,
+
     terminalArgs: Output<Unwrap<WorkloadTerminalArgs>>,
     containers: Output<Container[]>,
-    namespace: Output<Namespace>,
-    metadata: Output<types.output.meta.v1.ObjectMeta>,
     podTemplate: Output<types.output.core.v1.PodTemplateSpec>,
     networkPolicy: Output<NetworkPolicy | undefined>,
 
@@ -545,12 +680,10 @@ export abstract class ExposableWorkload extends Workload {
       name,
       args,
       opts,
-      apiVersion,
-      kind,
+      metadata,
+      namespace,
       terminalArgs,
       containers,
-      namespace,
-      metadata,
       podTemplate,
       networkPolicy,
     )
@@ -584,6 +717,17 @@ export abstract class ExposableWorkload extends Workload {
     })
   }
 
+  /**
+   * The merged and deduplicated L3 endpoints of all routes.
+   */
+  get endpoints(): Output<network.L3Endpoint[]> {
+    return this.routes.apply(routes =>
+      output(routes.map(route => route.route.endpoints))
+        .apply(endpoints => flat(endpoints))
+        .apply(mergeEndpoints),
+    )
+  }
+
   /**
    * The entity of the workload.
    */
@@ -597,7 +741,7 @@ export abstract class ExposableWorkload extends Workload {
   >
 
   /**
-   * Creates a generic workload or patches the existing one.
+   * Creates a generic exposable workload or patches the existing one.
    */
   static createOrPatchGeneric(
     name: string,
@@ -605,7 +749,7 @@ export abstract class ExposableWorkload extends Workload {
     opts?: CustomResourceOptions,
   ): Output<ExposableWorkload> {
     return output(args).apply(async args => {
-      if (args.existing?.type === "deployment") {
+      if (args.existing?.kind === "Deployment") {
         const { Deployment } = await import("./deployment")
 
         return Deployment.patch(
@@ -619,7 +763,7 @@ export abstract class ExposableWorkload extends Workload {
         )
       }
 
-      if (args.existing?.type === "stateful-set") {
+      if (args.existing?.kind === "StatefulSet") {
         const { StatefulSet } = await import("./stateful-set")
 
         return StatefulSet.patch(
@@ -633,19 +777,19 @@ export abstract class ExposableWorkload extends Workload {
         )
       }
 
-      if (args.type === "Deployment") {
+      if (args.defaultType === "Deployment") {
         const { Deployment } = await import("./deployment")
 
         return Deployment.create(name, deepmerge(args, args.deployment), opts)
       }
 
-      if (args.type === "StatefulSet") {
+      if (args.defaultType === "StatefulSet") {
         const { StatefulSet } = await import("./stateful-set")
 
         return StatefulSet.create(name, deepmerge(args, args.statefulSet), opts)
       }
 
-      throw new Error(`Unknown workload type: ${args.type as string}`)
+      throw new Error(`Unknown workload type: ${args.defaultType as string}`)
     })
   }
 }

package/dist/chunk-3CKMDTYK.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/service.ts"],"names":["args"],"mappings":";;;;;;;;;AA8CA,IAAM,mBAAmB,CAAC,GAAG,eAAA,EAAiB,MAAA,EAAQ,SAAS,UAAU,CAAA;AASlE,SAAS,qBAAA,CACd,UACA,OAAA,EACiC;AACjC,EAAA,OACE,KAAA,CAAM,GAAA,CAAI,qBAAA,EAAuB,QAAQ,CAAA,IACzC,SAAS,QAAA,CAAS,aAAa,CAAA,CAAE,SAAA,KAAc,OAAA,CAAQ,EAAA;AAE3D;AAKO,IAAe,OAAA,GAAf,MAAe,QAAA,SAAgB,cAAA,CAAe;AAAA,EACzC,WAAA,CACR,IAAA,EACA,IAAA,EACA,IAAA,EACA,IAAA,EAEA,YACA,IAAA,EACA,SAAA,EACA,QAAA,EAKS,IAAA,EAKA,MAAA,EACT;AACA,IAAA,KAAA,CAAM,MAAM,IAAA,EAAM,IAAA,EAAM,MAAM,UAAA,EAAY,IAAA,EAAM,WAAW,QAAQ,CAAA;AAP1D,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAKA,IAAA,IAAA,CAAA,MAAA,GAAA,MAAA;AAAA,EAGX;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,MAAA,GAA8B;AAChC,IAAA,OAAO,MAAA,CAAO;AAAA,MACZ,IAAA,EAAM,SAAA;AAAA,MACN,SAAA,EAAW,KAAK,OAAA,CAAQ,EAAA;AAAA,MACxB,WAAA,EAAa,KAAK,OAAA,CAAQ,IAAA;AAAA,MAC1B,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,WAAW,IAAA,CAAK;AAAA,KACjB,CAAA;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,MAAA,CAAO,IAAA,EAAc,IAAA,EAAmB,IAAA,EAA0C;AACvF,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,OAAO,aAAA,CACL,IAAA,EACA,IAAA,EACA,IAAA,EACS;AACT,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,IAAI,aAAa,IAAA,EAAM;AAAA,QAC5B,GAAG,IAAA;AAAA,QACH,IAAA,EAAM,MAAA,CAAO,IAAA,CAAK,QAAQ,EAAE,QAAA,CAAS,IAAA;AAAA,QACrC,SAAA,EAAW,UAAU,gBAAA,CAAiB,IAAA,CAAK,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAO;AAAA,OACpF,CAAA;AAAA,IACH;AAEA,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASA,aAAa,WAAA,CACX,IAAA,EACA,IAAA,EACA,IAAA,EACkB;AAClB,IAAA,IAAI,KAAK,QAAA,EAAU;AACjB,MAAA,OAAO,MAAM,SAAQ,QAAA,CAAS,IAAA,CAAK,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAO,CAAA;AAAA,IAC7E;AAEA,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAWA,OAAO,KAAA,CAAM,IAAA,EAAc,IAAA,EAAmB,IAAA,EAA0C;AACtF,IAAA,OAAO,IAAI,YAAA,CAAa,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC1C;AAAA;AAAA;AAAA;AAAA,EAKA,OAAO,IAAA,CAAK,IAAA,EAAc,IAAA,EAA0B,IAAA,EAA0C;AAC5F,IAAA,OAAO,IAAI,cAAA,CAAe,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC5C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,OAAO,GAAA,CAAI,IAAA,EAAc,IAAA,EAA2B,IAAA,EAA0C;AAC5F,IAAA,OAAO,IAAI,eAAA,CAAgB,IAAA,EAAM,IAAA,EAAM,IAAI,CAAA;AAAA,EAC7C;AAAA,EAEA,OAAwB,YAAA,mBAAe,IAAI,GAAA,EAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAahE,OAAO,GAAA,CAAI,MAAA,EAAqB,OAAA,EAAsC;AACpE,IAAA,OAAO,WAAA;AAAA,MACL,QAAA,CAAQ,YAAA;AAAA,MACR,CAAA,EAAG,MAAA,CAAO,WAAW,CAAA,CAAA,EAAI,MAAA,CAAO,QAAA,CAAS,SAAS,CAAA,CAAA,EAAI,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,OAAO,SAAS,CAAA,CAAA;AAAA,MAC9F,CAAA,IAAA,KAAQ;AACN,QAAA,OAAO,QAAA,CAAQ,IAAI,IAAA,EAAM;AAAA,UACvB,IAAA,EAAM,OAAO,QAAA,CAAS,IAAA;AAAA,UACtB,SAAA,EAAW,SAAA,CAAU,gBAAA,CAAiB,MAAA,EAAQ,OAAO;AAAA,SACtD,CAAA;AAAA,MACH;AAAA,KACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaA,aAAa,QAAA,CAAS,MAAA,EAA4B,OAAA,EAA+C;AAC/F,IAAA,MAAM,cAAA,GAAiB,MAAM,SAAA,CAAU,MAAM,CAAA;AAE7C,IAAA,OAAO,QAAA,CAAQ,GAAA,CAAI,cAAA,EAAgB,MAAA,CAAO,OAAO,CAAC,CAAA;AAAA,EACpD;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,gBAAgB,MAAA,EAAgE;AAC9E,IAAA,OAAO,MAAA,CAAO,KAAK,SAAS,CAAA,CAAE,MAAM,CAAA,SAAA,KAAa,eAAA,CAAgB,SAAA,EAAW,MAAM,CAAC,CAAA;AAAA,EACrF;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,SAAA,GAA2C;AAC7C,IAAA,OAAO,MAAA,CAAO;AAAA,MACZ,SAAS,IAAA,CAAK,OAAA;AAAA,MACd,UAAU,IAAA,CAAK,QAAA;AAAA,MACf,MAAM,IAAA,CAAK,IAAA;AAAA,MACX,QAAQ,IAAA,CAAK;AAAA,KACd,EAAE,KAAA,CAAM,CAAC,EAAE,OAAA,EAAS,QAAA,EAAU,IAAA,EAAM,MAAA,EAAO,KAAM;AAChD,MAAA,MAAM,gBAAA,GAAgD;AAAA,QACpD,aAAA,EAAe;AAAA,UACb,WAAW,OAAA,CAAQ,EAAA;AAAA,UACnB,aAAa,OAAA,CAAQ,IAAA;AAAA,UACrB,MAAM,QAAA,CAAS,IAAA;AAAA,UACf,WAAW,QAAA,CAAS,SAAA;AAAA,UACpB,UAAU,IAAA,CAAK,QAAA;AAAA,UACf,UAAA,EAAY,KAAK,KAAA,CAAM,CAAC,EAAE,UAAA,IAAc,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE;AAAA;AACxD,OACF;AAEA,MAAA,MAAM,kBAAA,GAAqB,IAAA,CAAK,UAAA,EAAY,GAAA,CAAI,CAAA,EAAA,MAAO;AAAA,QACrD,GAAG,gBAAgB,EAAE,CAAA;AAAA,QACrB,UAAA,EAAY,UAAA;AAAA,QACZ,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,QACpB,UAAU,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,UAAU,WAAA,EAAY;AAAA,QAC9C,QAAA,EAAU;AAAA,OACZ,CAAE,CAAA;AAEF,MAAA,IAAI,kBAAA,CAAmB,SAAS,CAAA,EAAG;AACjC,QAAA,kBAAA,CAAmB,OAAA,CAAQ;AAAA,UACzB,IAAA,EAAM,UAAA;AAAA,UACN,UAAA,EAAY,UAAA;AAAA,UACZ,UAAU,CAAA,EAAG,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,SAAS,SAAS,CAAA,kBAAA,CAAA;AAAA,UAChD,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,UACpB,UAAU,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,UAAU,WAAA,EAAY;AAAA,UAC9C,QAAA,EAAU;AAAA,SACX,CAAA;AAAA,MACH;AAEA,MAAA,MAAM,oBACJ,IAAA,CAAK,IAAA,KAAS,aACV,OAAA,CAAQ,SAAA,CAAU,IAAI,CAAA,QAAA,MAAa;AAAA,QACjC,GAAI,QAAA;AAAA,QACJ,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,QAAA;AAAA,QACpB,UAAU,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,UAAU,WAAA,EAAY;AAAA,QAC9C,QAAA,EAAU;AAAA,OACZ,CAAE,IACF,EAAC;AAEP,MAAA,MAAM,qBAAA,GACJ,KAAK,IAAA,KAAS,cAAA,GACV,OAAO,YAAA,EAAc,OAAA,EAAS,IAAI,CAAA,QAAA,MAAa;AAAA,QAC7C,GAAG,eAAA,CAAgB,QAAA,CAAS,EAAA,IAAM,SAAS,QAAQ,CAAA;AAAA,QACnD,IAAA,EAAM,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,IAAA;AAAA,QACpB,UAAU,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA,CAAE,UAAU,WAAA,EAAY;AAAA,QAC9C,QAAA,EAAU;AAAA,OACZ,CAAE,IACF,EAAC;AAEP,MAAA,OAAO,QAAA;AAAA,QACL;AAAA,UACE,GAAI,sBAAsB,EAAC;AAAA,UAC3B,GAAI,yBAAyB,EAAC;AAAA,UAC9B,GAAI,qBAAqB;AAAC,SAC5B;AAAA,QACA;AAAA,OACF;AAAA,IACF,CAAC,CAAA;AAAA,EACH;AACF;AASA,SAAS,iBAAA,CAAkB,MAAmB,OAAA,EAAsB;AAClE,EAAA,OAAO,MAAA,CAAO,IAAI,CAAA,CAAE,KAAA,CAAM,CAAAA,KAAAA,KAAQ;AAChC,IAAA,OAAO,SAAA;AAAA,MACL;AAAA,QACE,KAAA,EAAO,SAAA,CAAUA,KAAAA,CAAK,IAAA,EAAMA,MAAK,KAAK,CAAA;AAAA,QAEtC,WAAA,EAAaA,KAAAA,CAAK,QAAA,GACdA,KAAAA,CAAK,WAAA,GACHA,KAAAA,CAAK,WAAA,GACL,OAAA,CAAQ,WAAA,GACV,SAAA,CAAU,MAAA,EAAWA,KAAAA,CAAK,WAAW,CAAA;AAAA,QAEzC,IAAA,EAAM,cAAA,CAAeA,KAAAA,EAAM,OAAO;AAAA,OACpC;AAAA,MACA,IAAA,CAAKA,OAAM,gBAAgB;AAAA,KAC7B;AAAA,EACF,CAAC,CAAA;AACH;AAEA,IAAM,cAAA,GAAN,cAA6B,OAAA,CAAQ;AAAA,EACnC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAmB,IAAA,EAAiC;AAC5E,IAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAC9D,MAAA,OAAO,IAAI,KAAK,EAAA,CAAG,OAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,WAAA,CAAY,IAAA,EAAM,IAAI,CAAA;AAAA,UAChC,IAAA,EAAM,iBAAA,CAAkB,IAAA,EAAM,OAAO;AAAA,SACvC;AAAA,QACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,uBAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,OAAA,CAAQ,UAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,OAAA,CAAQ,QAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,OAAA,CAAQ;AAAA,KACV;AAAA,EACF;AACF,CAAA;AAEA,IAAM,YAAA,GAAN,cAA2B,OAAA,CAAQ;AAAA,EACjC,WAAA,CAAY,IAAA,EAAc,IAAA,EAAmB,IAAA,EAAiC;AAC5E,IAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAC9D,MAAA,OAAO,IAAI,KAAK,EAAA,CAAG,YAAA;AAAA,QACjB,IAAA;AAAA,QACA;AAAA,UACE,QAAA,EAAU,WAAA,CAAY,IAAA,EAAM,IAAI,CAAA;AAAA,UAChC,IAAA,EAAM,iBAAA,CAAkB,IAAA,EAAM,OAAO;AAAA,SACvC;AAAA,QACA,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,4BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,OAAA,CAAQ,UAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,OAAA,CAAQ,QAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,OAAA,CAAQ;AAAA,KACV;AAAA,EACF;AACF,CAAA;AAcA,IAAM,cAAA,GAAN,cAA6B,OAAA,CAAQ;AAAA,EACnC,WAAA,CAAY,IAAA,EAAc,IAAA,EAA0B,IAAA,EAAiC;AACnF,IAAA,KAAA;AAAA,MACE,8BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,UAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,IAAA;AAAA,MACrB,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,QAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE,IAAA;AAAA,MACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,CAAE;AAAA,KACvB;AAAA,EACF;AACF,CAAA;AAcA,IAAM,eAAA,GAAN,cAA8B,OAAA,CAAQ;AAAA,EACpC,WAAA,CAAY,IAAA,EAAc,IAAA,EAA2B,IAAA,EAAiC;AACpF,IAAA,MAAM,UAAU,MAAA,CAAO,IAAA,CAAK,SAAS,CAAA,CAAE,OAAA,CAAQ,MAAM,CAAA,OAAA,KAAW;AAC9D,MAAA,OAAO,IAAA,CAAK,GAAG,OAAA,CAAQ,GAAA;AAAA,QACrB,IAAA;AAAA,QACA,WAAA,CAAA,EAAc,OAAO,IAAA,CAAK,SAAS,EAAE,QAAA,CAAS,IAAI,CAAA,CAAA,EAAI,IAAA,CAAK,IAAI,CAAA,CAAA;AAAA,QAC/D,EAAE,GAAG,IAAA,EAAM,MAAA,EAAQ,MAAM,QAAA,EAAU,WAAA,CAAY,OAAO,CAAA;AAAE,OAC1D;AAAA,IACF,CAAC,CAAA;AAED,IAAA,KAAA;AAAA,MACE,+BAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MACA,IAAA;AAAA,MAEA,OAAA,CAAQ,UAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,MAAA,CAAO,KAAK,SAAS,CAAA;AAAA,MACrB,OAAA,CAAQ,QAAA;AAAA,MACR,OAAA,CAAQ,IAAA;AAAA,MACR,OAAA,CAAQ;AAAA,KACV;AAAA,EACF;AACF,CAAA;AAQO,SAAS,8BACd,IAAA,EACiC;AACjC,EAAA,OAAO;AAAA,IACL,MAAM,IAAA,CAAK,IAAA;AAAA,IACX,MAAM,IAAA,CAAK,aAAA;AAAA,IACX,YAAY,IAAA,CAAK,aAAA;AAAA,IACjB,UAAU,IAAA,CAAK;AAAA,GACjB;AACF;AAQO,SAAS,0BACd,OAAA,EACmC;AACnC,EAAA,OAAO;AAAA,IACL,WAAA,EAAa,QAAQ,IAAA,CAAK;AAAA,GAC5B;AACF;AASO,SAAS,cAAA,CACd,SACA,OAAA,EACe;AACf,EAAA,IAAI,SAAS,IAAA,EAAM;AACjB,IAAA,OAAO,OAAA,CAAQ,IAAA;AAAA,EACjB;AAEA,EAAA,IAAI,CAAC,SAAS,QAAA,EAAU;AACtB,IAAA,OAAO,WAAA;AAAA,EACT;AAEA,EAAA,OAAO,OAAA,CAAQ,MAAA,EAAQ,mBAAA,KAAwB,cAAA,GAAiB,cAAA,GAAiB,UAAA;AACnF;AAQO,SAAS,wBACd,QAAA,EACiC;AACjC,EAAA,OAAO;AAAA,IACL,MAAM,QAAA,CAAS,IAAA;AAAA,IACf,QAAA,EAAU,QAAA,CAAS,QAAA,CAAS,WAAA;AAAY,GAC1C;AACF","file":"chunk-3CKMDTYK.js","sourcesContent":["import { filterEndpoints, l4EndpointToString, parseL3Endpoint } from \"@highstate/common\"\nimport { check, getOrCreate } from \"@highstate/contract\"\nimport { k8s, type network } from \"@highstate/library\"\nimport {\n  type ComponentResourceOptions,\n  type Input,\n  type Inputs,\n  interpolate,\n  normalize,\n  type Output,\n  output,\n  toPromise,\n} from \"@highstate/pulumi\"\nimport { core, type types } from \"@pulumi/kubernetes\"\nimport { deepmerge } from \"deepmerge-ts\"\nimport { omit, uniqueBy } from \"remeda\"\nimport { Namespace } from \"./namespace\"\nimport {\n  commonExtraArgs,\n  getProvider,\n  mapMetadata,\n  ScopedResource,\n  type ScopedResourceArgs,\n} from \"./shared\"\n\nexport type ServiceArgs = ScopedResourceArgs & {\n  /**\n   * The port to expose the service on.\n   */\n  port?: Input<types.input.core.v1.ServicePort>\n\n  /**\n   * Whether the service should be exposed by `NodePort` or `LoadBalancer`.\n   *\n   * The type of the service will be determined automatically based on the cluster.\n   */\n  external?: Input<boolean>\n} & types.input.core.v1.ServiceSpec\n\nexport type CreateOrGetServiceArgs = ServiceArgs & {\n  /**\n   * The service entity to patch/retrieve.\n   */\n  existing: Input<k8s.Service> | undefined\n}\n\nconst serviceExtraArgs = [...commonExtraArgs, \"port\", \"ports\", \"external\"] as const\n\n/**\n * Checks if the endpoint is from the given cluster.\n *\n * @param endpoint The endpoint to check.\n * @param cluster The cluster to check against.\n * @returns True if the endpoint is from the cluster, false otherwise.\n */\nexport function isEndpointFromCluster(\n  endpoint: network.L3Endpoint,\n  cluster: k8s.Cluster,\n): endpoint is k8s.ServiceEndpoint {\n  return (\n    check(k8s.serviceEndpointSchema, endpoint) &&\n    endpoint.metadata[\"k8s.service\"].clusterId === cluster.id\n  )\n}\n\n/**\n * Represents a Kubernetes Service resource with endpoints and metadata.\n */\nexport abstract class Service extends ScopedResource {\n  protected constructor(\n    type: string,\n    name: string,\n    args: Inputs,\n    opts: ComponentResourceOptions | undefined,\n\n    apiVersion: Output<string>,\n    kind: Output<string>,\n    namespace: Output<Namespace>,\n    metadata: Output<types.output.meta.v1.ObjectMeta>,\n\n    /**\n     * The spec of the underlying Kubernetes service.\n     */\n    readonly spec: Output<types.output.core.v1.ServiceSpec>,\n\n    /**\n     * The status of the underlying Kubernetes service.\n     */\n    readonly status: Output<types.output.core.v1.ServiceStatus>,\n  ) {\n    super(type, name, args, opts, apiVersion, kind, namespace, metadata)\n  }\n\n  /**\n   * The Highstate service entity.\n   */\n  get entity(): Output<k8s.Service> {\n    return output({\n      type: \"service\",\n      clusterId: this.cluster.id,\n      clusterName: this.cluster.name,\n      metadata: this.metadata,\n      endpoints: this.endpoints,\n    })\n  }\n\n  /**\n   * Creates a new service.\n   */\n  static create(name: string, args: ServiceArgs, opts?: ComponentResourceOptions): Service {\n    return new CreatedService(name, args, opts)\n  }\n\n  /**\n   * Creates a new service or patches an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the service name.\n   * @param args The arguments to create or patch the service with.\n   * @param opts Optional resource options.\n   */\n  static createOrPatch(\n    name: string,\n    args: CreateOrGetServiceArgs,\n    opts?: ComponentResourceOptions,\n  ): Service {\n    if (args.existing) {\n      return new ServicePatch(name, {\n        ...args,\n        name: output(args.existing).metadata.name,\n        namespace: Namespace.forResourceAsync(args.existing, output(args.namespace).cluster),\n      })\n    }\n\n    return new CreatedService(name, args, opts)\n  }\n\n  /**\n   * Creates a new service or gets an existing one.\n   *\n   * @param name The name of the resource. May not be the same as the service name. Will not be used when existing service is retrieved.\n   * @param args The arguments to create or get the service with.\n   * @param opts Optional resource options.\n   */\n  static async createOrGet(\n    name: string,\n    args: CreateOrGetServiceArgs,\n    opts?: ComponentResourceOptions,\n  ): Promise<Service> {\n    if (args.existing) {\n      return await Service.forAsync(args.existing, output(args.namespace).cluster)\n    }\n\n    return new CreatedService(name, args, opts)\n  }\n\n  /**\n   * Patches an existing service.\n   *\n   * Will throw an error if the service does not exist.\n   *\n   * @param name The name of the resource. May not be the same as the service name.\n   * @param args The arguments to patch the service with.\n   * @param opts Optional resource options.\n   */\n  static patch(name: string, args: ServiceArgs, opts?: ComponentResourceOptions): Service {\n    return new ServicePatch(name, args, opts)\n  }\n\n  /**\n   * Wraps an existing Kubernetes service.\n   */\n  static wrap(name: string, args: WrappedServiceArgs, opts?: ComponentResourceOptions): Service {\n    return new WrappedService(name, args, opts)\n  }\n\n  /**\n   * Gets an existing service.\n   *\n   * Will throw an error if the service does not exist.\n   */\n  static get(name: string, args: ExternalServiceArgs, opts?: ComponentResourceOptions): Service {\n    return new ExternalService(name, args, opts)\n  }\n\n  private static readonly serviceCache = new Map<string, Service>()\n\n  /**\n   * Gets an existing service for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{name}.{clusterId}`.\n   *\n   * This method is idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the service for.\n   * @param cluster The cluster where the service is located.\n   */\n  static for(entity: k8s.Service, cluster: Input<k8s.Cluster>): Service {\n    return getOrCreate(\n      Service.serviceCache,\n      `${entity.clusterName}.${entity.metadata.namespace}.${entity.metadata.name}.${entity.clusterId}`,\n      name => {\n        return Service.get(name, {\n          name: entity.metadata.name,\n          namespace: Namespace.forResourceAsync(entity, cluster),\n        })\n      },\n    )\n  }\n\n  /**\n   * Gets an existing service for a given entity.\n   * Prefer this method over `get` when possible.\n   *\n   * It automatically names the resource with the following format: `{clusterName}.{namespace}.{name}.{clusterId}`.\n   *\n   * This method is idempotent and will return the same instance for the same entity.\n   *\n   * @param entity The entity to get the service for.\n   * @param cluster The cluster where the service is located.\n   */\n  static async forAsync(entity: Input<k8s.Service>, cluster: Input<k8s.Cluster>): Promise<Service> {\n    const resolvedEntity = await toPromise(entity)\n\n    return Service.for(resolvedEntity, output(cluster))\n  }\n\n  /**\n   * Returns the endpoints of the service applying the given filter.\n   *\n   * If no filter is specified, the default behavior of `filterEndpoints` is used.\n   *\n   * @param filter If specified, the endpoints are filtered based on the given filter.\n   * @returns The endpoints of the service.\n   */\n  filterEndpoints(filter?: network.EndpointFilter): Output<k8s.ServiceEndpoint[]> {\n    return output(this.endpoints).apply(endpoints => filterEndpoints(endpoints, filter))\n  }\n\n  /**\n   * Returns the endpoints of the service including both internal and external endpoints.\n   */\n  get endpoints(): Output<k8s.ServiceEndpoint[]> {\n    return output({\n      cluster: this.cluster,\n      metadata: this.metadata,\n      spec: this.spec,\n      status: this.status,\n    }).apply(({ cluster, metadata, spec, status }) => {\n      const endpointMetadata: k8s.EndpointServiceMetadata = {\n        \"k8s.service\": {\n          clusterId: cluster.id,\n          clusterName: cluster.name,\n          name: metadata.name,\n          namespace: metadata.namespace,\n          selector: spec.selector,\n          targetPort: spec.ports[0].targetPort ?? spec.ports[0].port,\n        },\n      }\n\n      const clusterIpEndpoints = spec.clusterIPs?.map(ip => ({\n        ...parseL3Endpoint(ip),\n        visibility: \"internal\" as network.EndpointVisibility,\n        port: spec.ports[0].port,\n        protocol: spec.ports[0].protocol?.toLowerCase() as network.L4Protocol,\n        metadata: endpointMetadata,\n      }))\n\n      if (clusterIpEndpoints.length > 0) {\n        clusterIpEndpoints.unshift({\n          type: \"hostname\",\n          visibility: \"internal\",\n          hostname: `${metadata.name}.${metadata.namespace}.svc.cluster.local`,\n          port: spec.ports[0].port,\n          protocol: spec.ports[0].protocol?.toLowerCase() as network.L4Protocol,\n          metadata: endpointMetadata,\n        })\n      }\n\n      const nodePortEndpoints =\n        spec.type === \"NodePort\"\n          ? cluster.endpoints.map(endpoint => ({\n              ...(endpoint as network.L3Endpoint),\n              port: spec.ports[0].nodePort,\n              protocol: spec.ports[0].protocol?.toLowerCase() as network.L4Protocol,\n              metadata: endpointMetadata,\n            }))\n          : []\n\n      const loadBalancerEndpoints =\n        spec.type === \"LoadBalancer\"\n          ? status.loadBalancer?.ingress?.map(endpoint => ({\n              ...parseL3Endpoint(endpoint.ip ?? endpoint.hostname),\n              port: spec.ports[0].port,\n              protocol: spec.ports[0].protocol?.toLowerCase() as network.L4Protocol,\n              metadata: endpointMetadata,\n            }))\n          : []\n\n      return uniqueBy(\n        [\n          ...(clusterIpEndpoints ?? []),\n          ...(loadBalancerEndpoints ?? []),\n          ...(nodePortEndpoints ?? []),\n        ],\n        l4EndpointToString,\n      )\n    })\n  }\n}\n\n/**\n * Creates the service spec configuration based on arguments and cluster settings.\n *\n * @param args The service arguments containing port and external configuration.\n * @param cluster The cluster where the service will be created.\n * @returns The service spec configuration.\n */\nfunction createServiceSpec(args: ServiceArgs, cluster: k8s.Cluster) {\n  return output(args).apply(args => {\n    return deepmerge(\n      {\n        ports: normalize(args.port, args.ports),\n\n        externalIPs: args.external\n          ? args.externalIPs\n            ? args.externalIPs\n            : cluster.externalIps\n          : normalize(undefined, args.externalIPs),\n\n        type: getServiceType(args, cluster),\n      },\n      omit(args, serviceExtraArgs),\n    )\n  })\n}\n\nclass CreatedService extends Service {\n  constructor(name: string, args: ServiceArgs, opts?: ComponentResourceOptions) {\n    const service = output(args.namespace).cluster.apply(cluster => {\n      return new core.v1.Service(\n        name,\n        {\n          metadata: mapMetadata(args, name),\n          spec: createServiceSpec(args, cluster),\n        },\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:Service\",\n      name,\n      args,\n      opts,\n\n      service.apiVersion,\n      service.kind,\n      output(args.namespace),\n      service.metadata,\n      service.spec,\n      service.status,\n    )\n  }\n}\n\nclass ServicePatch extends Service {\n  constructor(name: string, args: ServiceArgs, opts?: ComponentResourceOptions) {\n    const service = output(args.namespace).cluster.apply(cluster => {\n      return new core.v1.ServicePatch(\n        name,\n        {\n          metadata: mapMetadata(args, name),\n          spec: createServiceSpec(args, cluster),\n        },\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:ServicePatch\",\n      name,\n      args,\n      opts,\n\n      service.apiVersion,\n      service.kind,\n      output(args.namespace),\n      service.metadata,\n      service.spec,\n      service.status,\n    )\n  }\n}\n\nexport type WrappedServiceArgs = {\n  /**\n   * The underlying Kubernetes service to wrap.\n   */\n  service: Input<core.v1.Service>\n\n  /**\n   * The namespace where the service is located.\n   */\n  namespace: Input<Namespace>\n}\n\nclass WrappedService extends Service {\n  constructor(name: string, args: WrappedServiceArgs, opts?: ComponentResourceOptions) {\n    super(\n      \"highstate:k8s:WrappedService\",\n      name,\n      args,\n      opts,\n\n      output(args.service).apiVersion,\n      output(args.service).kind,\n      output(args.namespace),\n      output(args.service).metadata,\n      output(args.service).spec,\n      output(args.service).status,\n    )\n  }\n}\n\nexport type ExternalServiceArgs = {\n  /**\n   * The name of the service to get.\n   */\n  name: Input<string>\n\n  /**\n   * The namespace of the service to get.\n   */\n  namespace: Input<Namespace>\n}\n\nclass ExternalService extends Service {\n  constructor(name: string, args: ExternalServiceArgs, opts?: ComponentResourceOptions) {\n    const service = output(args.namespace).cluster.apply(cluster => {\n      return core.v1.Service.get(\n        name,\n        interpolate`${output(args.namespace).metadata.name}/${args.name}`,\n        { ...opts, parent: this, provider: getProvider(cluster) },\n      )\n    })\n\n    super(\n      \"highstate:k8s:ExternalService\",\n      name,\n      args,\n      opts,\n\n      service.apiVersion,\n      service.kind,\n      output(args.namespace),\n      service.metadata,\n      service.spec,\n      service.status,\n    )\n  }\n}\n\n/**\n * Maps a container port to a service port.\n *\n * @param port The container port to map.\n * @returns The corresponding service port configuration.\n */\nexport function mapContainerPortToServicePort(\n  port: types.input.core.v1.ContainerPort,\n): types.input.core.v1.ServicePort {\n  return {\n    name: port.name,\n    port: port.containerPort,\n    targetPort: port.containerPort,\n    protocol: port.protocol,\n  }\n}\n\n/**\n * Maps a service to a label selector.\n *\n * @param service The service to extract the label selector from.\n * @returns The label selector based on the service's selector.\n */\nexport function mapServiceToLabelSelector(\n  service: core.v1.Service,\n): types.input.meta.v1.LabelSelector {\n  return {\n    matchLabels: service.spec.selector,\n  }\n}\n\n/**\n * Determines the appropriate service type based on the service arguments and cluster configuration.\n *\n * @param service The service configuration containing type and external properties.\n * @param cluster The cluster where the service will be created.\n * @returns The service type to use.\n */\nexport function getServiceType(\n  service: Pick<ServiceArgs, \"type\" | \"external\"> | undefined,\n  cluster: k8s.Cluster,\n): Input<string> {\n  if (service?.type) {\n    return service.type\n  }\n\n  if (!service?.external) {\n    return \"ClusterIP\"\n  }\n\n  return cluster.quirks?.externalServiceType === \"LoadBalancer\" ? \"LoadBalancer\" : \"NodePort\"\n}\n\n/**\n * Converts a network L4 endpoint to a Kubernetes service port.\n *\n * @param endpoint The L4 endpoint to convert.\n * @returns The corresponding Kubernetes service port configuration.\n */\nexport function l4EndpointToServicePort(\n  endpoint: network.L4Endpoint,\n): types.input.core.v1.ServicePort {\n  return {\n    port: endpoint.port,\n    protocol: endpoint.protocol.toUpperCase(),\n  }\n}\n"]}